CVE-2008-3384
8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.025 Low
EPSS
Percentile
90.2%
Multiple directory traversal vulnerabilities in help/help.php in Interact Learning Community Environment Interact 2.4.1 allow remote attackers to include and execute arbitrary local files via a … (dot dot) in the (1) module and (2) file parameters.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cce-interact:interact | cce-interact interact | eq | 2.4.1 |
References
secunia.com/advisories/31150
securityreason.com/securityalert/4073
sourceforge.net/forum/forum.php?thread_id=2104908&forum_id=237160
www.securityfocus.com/archive/1/494582/100/0/threaded
www.securityfocus.com/bid/30315
www.vupen.com/english/advisories/2008/2155/references
exchange.xforce.ibmcloud.com/vulnerabilities/43937
www.exploit-db.com/exploits/6107
Related
8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.025 Low
EPSS
Percentile
90.2%